user model was missing has_secure_password